Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/f1432e62-acbc-3fcc-8436-8d1fb451f216.roa
File:                     f1432e62-acbc-3fcc-8436-8d1fb451f216.roa (raw, json)
Hash identifier:          XOo2uh3HIdGl1F+VdAsGSGUazsQOpQFiOXX2E7ItzSk=
Subject key identifier:   38:CE:CB:76:B4:28:EB:67:78:EB:34:DF:9E:8E:E2:8A:9C:D6:2F:27
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F4328584596335376F42C2AF8BEA8BF80
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/f1432e62-acbc-3fcc-8436-8d1fb451f216.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     53856
IP address blocks:        142.202.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:53:76:f4:2c:2a:f8:be:a8:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=22f0f758-6c12-4a4e-a6c4-dc5d507fc179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:86:f8:99:a0:27:84:a4:12:5f:8c:86:4d:f6:
                    9d:62:0f:31:3d:55:00:00:52:a3:a8:f8:32:83:c4:
                    de:c0:08:8f:d0:fa:ff:91:66:c8:f6:48:bb:62:67:
                    3c:fb:22:bf:4d:65:d0:24:12:78:99:c0:d6:7b:05:
                    16:95:39:77:70:f9:8a:b9:64:b8:8d:9e:0c:d3:d4:
                    e4:3a:2f:3a:57:92:e2:c8:d0:8b:40:9c:02:46:a3:
                    e5:11:e8:b2:d5:69:6f:3b:38:d7:80:44:70:03:e6:
                    35:10:b2:27:91:a7:ad:50:f2:b9:ce:99:2b:5b:a2:
                    41:49:3d:b2:03:1f:22:ab:1c:23:3b:08:09:57:39:
                    5f:03:58:4f:fd:a7:09:18:81:01:a4:a4:c7:b3:39:
                    8b:61:91:23:63:07:d3:1f:b2:a2:63:bf:82:d3:07:
                    f3:92:29:12:38:d7:91:14:22:e7:29:81:07:a5:53:
                    34:29:0b:8b:68:37:5f:bc:b6:fc:09:0c:99:fb:6b:
                    c6:ed:68:17:f2:c0:b9:fa:6f:c8:ca:dc:6d:4e:74:
                    9b:5c:4c:6a:59:f7:7a:33:0e:0d:7a:fb:21:ae:f9:
                    35:36:c8:b1:31:cf:32:84:0b:c0:07:90:56:66:35:
                    bc:32:d8:2a:0d:8f:96:ef:10:fe:05:3a:81:c9:3b:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CE:CB:76:B4:28:EB:67:78:EB:34:DF:9E:8E:E2:8A:9C:D6:2F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/f1432e62-acbc-3fcc-8436-8d1fb451f216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ee:c4:79:72:4b:55:7b:bd:86:5c:bb:aa:9e:3e:82:55:a7:
         28:68:c3:88:eb:a4:65:91:68:5c:60:69:51:87:61:95:d8:c2:
         af:c1:db:03:89:a9:85:99:63:be:59:48:00:00:46:5e:56:59:
         17:20:d6:84:c7:3d:01:fd:f5:00:a8:41:8d:b4:ba:e6:6f:0c:
         91:38:fa:bd:9a:a5:6e:a9:17:2d:18:e7:7e:e5:c0:9f:0f:66:
         2b:f6:dd:97:4e:19:aa:24:b6:5c:f9:c8:b4:be:77:f4:d6:74:
         aa:a6:56:56:36:3a:ee:6d:59:22:79:2a:34:dd:a5:48:bd:7d:
         8c:f6:ea:cc:c7:37:65:9c:70:e7:a1:95:ef:fb:4a:78:bf:b9:
         72:08:5a:1f:f6:3a:6b:f1:02:65:1e:85:64:eb:c2:e6:aa:ea:
         97:bf:5b:62:57:fd:ff:dc:40:21:88:ac:33:a2:98:11:49:af:
         a1:e2:7c:dc:a2:a1:3f:9f:a6:29:52:1d:47:27:8b:47:ca:a1:
         aa:7c:93:24:ab:63:7e:c3:f1:d6:39:eb:c2:ea:82:7e:7b:7a:
         7e:fb:e9:29:dd:36:d1:19:6c:d5:a9:ae:58:c6:5b:76:48:1e:
         92:d7:0a:1b:b2:83:74:d2:18:bf:34:77:f0:ad:0a:8c:36:bf:
         00:65:56:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:08:37 2024 by rpki-client on console-ams.rpki-client.org